CVE detail
CVE-2026-10194
A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. This patch is called 0f78a4ef6f645ea5530166e445e5436a5de58e75. A patch should be applied to remediate this issue.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://vuldb.com/vuln/367475/ctivuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 5:16 PM - https://vuldb.com/vuln/367475vuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 5:16 PM - https://vuldb.com/submit/821029vuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 5:16 PM - https://vuldb.com/cve/CVE-2026-10194vuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 5:16 PM No excerpt available.
referencegit.dcmtk.orgMay 31, 2026, 5:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-15520CVSS 1.9 · Low
A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Dec…
- CVE-2026-15506CVSS 7.1 · High
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. S…
- CVE-2026-15182CVSS 1.9 · Low
A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulati…
- CVE-2025-15668CVSS 1.9 · Low
A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_del_entry of the file src/isomedia/box_code_base.c of the component MP4Box. Such manip…
- CVE-2026-14759CVSS 1.9 · Low
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the…
- CVE-2026-14610CVSS 1.9 · Low
A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of…